November 6, 2015 By Douglas Bonderud 2 min read

There are more than 200,000 positions available for cybersecurity professionals in organizations across the country, yet many of them sit vacant for months or even years. Part of the problem is a cyber skills gap fueled by millennials’ lack of interest in cyber careers and the emergence of a gender gap, which leaves fewer women exposed to possible careers in technology and without any real access to IT mentors or programs.

According to CSO Online, however, the National Institute of Standards and Technology (NIST) is now funding the creation of a heat map that will show prospective applicants which jobs are open, where they are located and what type of qualifications are required to apply. The hope? That NIST’s map can stoke the fire of potential cyber professionals and encourage them to burn bright where they’re needed most.

Evolving Encouragement

Along with NIST, other government agencies are trying to drum up interest in cybersecurity careers. The NSA, for example, recently held its first annual Day of Cyber, which “enables students to test drive their future by living a day in the life of six NSA cyber leaders.” The idea of an interactive, self-guided experience that raises the profile of science, technology, engineering and math (STEM) careers can only benefit the industry as a whole.

As noted by Bloomberg Business, there’s a burgeoning interest among business school graduates for cyber careers, often from sources outside Silicon Valley. According to the Bloomberg piece, “A handful of B-schools in unlikely regions graduated more students into technology jobs in 2014 than into any other sector.” Why the change?

In large measure, the advancement of cloud and social networking technologies is responsible — students are no longer at a disadvantage if they can’t attend schools in California, New York, Boston or other tech hubs.

Cybersecurity Professionals Fire It Up

The NIST-funded heat map is meant to shine a light on companies across the nation that have available positions for cybersecurity professionals but simply haven’t been able to get the word out. For interested parties, the map provides much-needed choice: Do prospective IT employees prefer to work in areas of high tech concentration or opt for jobs in areas where they’re the only cybersecurity professional for miles in any direction?

The mapping tool, developed by analytics and research firm Burning Glass Technology and IT trade association CompTIA, will also let users break down specific job information to see details such as titles, necessary skills and required degrees, helping ensure they don’t waste their time applying for jobs they don’t have the qualifications to fill.

Despite cybersecurity jobs enjoying a $6,500 salary bump over other IT careers, they take 8 percent longer to fill, according to Burning Glass; companies demanding more specialized skill sets could wait months for a single qualified applicant. With the number of IT jobs doubling over the last few years and post-secondary institutions finally starting to turn out cyber-savvy graduating classes, the next logical step is linking IT pros to suitable positions.

Ideally, NIST’s career heat map should help address the burning need for cyber expertise and help fuel the fire for potential STEM graduates by giving them a sense of the market’s true depth.

More from

FYSA – Adobe Cold Fusion Path Traversal Vulnerability

2 min read - Summary Adobe has released a security bulletin (APSB24-107) addressing an arbitrary file system read vulnerability in ColdFusion, a web application server. The vulnerability, identified as CVE-2024-53961, can be exploited to read arbitrary files on the system, potentially leading to unauthorized access and data exposure. Threat Topography Threat Type: Arbitrary File System Read Industries Impacted: Technology, Software, and Web Development Geolocation: Global Environment Impact: Web servers running ColdFusion 2021 and 2023 are vulnerable Overview X-Force Incident Command is monitoring the disclosure…

What does resilience in the cyber world look like in 2025 and beyond?

6 min read -  Back in 2021, we ran a series called “A Journey in Organizational Resilience.” These issues of this series remain applicable today and, in many cases, are more important than ever, given the rapid changes of the last few years. But the term "resilience" can be difficult to define, and when we define it, we may limit its scope, missing the big picture.In the age of generative artificial intelligence (gen AI), the prevalence of breach data from infostealers and the near-constant…

Airplane cybersecurity: Past, present, future

4 min read - With most aviation processes now digitized, airlines and the aviation industry as a whole must prioritize cybersecurity. If a cyber criminal launches an attack that affects a system involved in aviation — either an airline’s system or a third-party vendor — the entire process, from safety to passenger comfort, may be impacted.To improve security in the aviation industry, the FAA recently proposed new rules to tighten cybersecurity on airplanes. These rules would “protect the equipment, systems and networks of transport…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today